-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 16 Apr 2025 10:56:55 +0200 Source: libapache2-mod-auth-openidc Binary: libapache2-mod-auth-openidc libapache2-mod-auth-openidc-dbgsym Architecture: s390x Version: 2.4.12.3-2+deb12u3 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Moritz Schlarb Description: libapache2-mod-auth-openidc - OpenID Connect Relying Party implementation for Apache Closes: 1102413 Changes: libapache2-mod-auth-openidc (2.4.12.3-2+deb12u3) bookworm-security; urgency=high . * Fix CVE-2025-31492 "protected content leakage when using OIDCProviderAuthRequestMethod POST" Backported applicable portions from upstream fix in https://github.com/OpenIDC/mod_auth_openidc/commit/b59b8ad63411857090ba1088e23fe414c690c127 (Closes: #1102413) Checksums-Sha1: a9835b4016dcf3e702f770b2ade961a436d856a8 335584 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_s390x.deb 37b9da9e8798ac1d53480821788f7944c86fcc2e 7958 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x-buildd.buildinfo e0ab6a802cfe5495afca174e5273b06f84daee55 174824 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x.deb Checksums-Sha256: 23436d66d3c48d410f915c72046b23cd1a832d7b7eacd6b93fc16f89f2a1d2e2 335584 libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_s390x.deb 2aef8050bf7f8f25e74a1ee9962e262bc7b4d1f410bba69dfcf689e1fdddb95c 7958 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x-buildd.buildinfo 0b134d101ae2c7dc6bc50a7e27e5db4d8084eb7a234d607e0ae431600308225e 174824 libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x.deb Files: 23a456276dca62a8f177c3b9c685ca3e 335584 debug optional libapache2-mod-auth-openidc-dbgsym_2.4.12.3-2+deb12u3_s390x.deb 93dd3ec4496fbba1098fb78d98a92584 7958 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x-buildd.buildinfo 79eb15c220ed658d4718ef3fa685545f 174824 httpd optional libapache2-mod-auth-openidc_2.4.12.3-2+deb12u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmf/1AYACgkQAKOyQzsW VavDKg/9EqohoRabgy8apRAXLGixHJJRIdwZPXhEEkydlcWvBtvWeuyL+V2e5ta6 2DNcGG5rSWD2yeivKSIHreQYay6/tahobiOZUGYlNnFX8eOEz7PW+/cXHx+wInMe x9OWwQ/Zq1vpuIArnnK7fXFa3nAURy2CGDgZNQN8ToTth41HkUBjMsO0j4WcRC+d gAsbQOB4LjjU1A4m9oxydeMnegxI/wQYmobn3NDicYCgYFBYL8xzD1nyimF5S4aQ BbZKf3s00o+z2WlWkqJaSlGNHQi9MaKM9fxGty0mq91D4G+NFZ1CcjXN4Ej0oLE8 VrsLtr6FO4cRNg33jPNcMHOv4JekpJA50jpfHoaRD7hhhIVRiEIDHmhbKIfPAHjT NqfpqqVxL5yek+3NYmkz8Je+hMDh9bryXuauFzyCG3k9lqbDXpduO4gJNb+oaHeL 4rasS1oa1//iQ3/LSNpWYM2fjeAiTxMJ8ed9z2Cfp6NMZ2iaYjiuz7Lg2qaiD81w dVDevs2/BiuQLgSH2CMHz/uT/mQRok6WD6Du8pBQGrmBPt6UIGySd8FyezprVXoq kJEgrewlH8GY++CFiN7TdLm3wntk645gxRFPIWPDRSSiaDeM6d4vrNr90wp8BnrT 7sXJN5Rj+j+BvrFFDZjLWjNh9rkZSG1GV6Y9RaodTN1Ofb82oWc= =4VCI -----END PGP SIGNATURE-----